<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 14 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.MsoPlainText, li.MsoPlainText, div.MsoPlainText
{mso-style-priority:99;
mso-style-link:"Plain Text Char";
margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-fareast-language:EN-US;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.PlainTextChar
{mso-style-name:"Plain Text Char";
mso-style-priority:99;
mso-style-link:"Plain Text";
font-family:"Calibri","sans-serif";}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri","sans-serif";
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:70.85pt 70.85pt 70.85pt 70.85pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=NL-BE link=blue vlink=purple><div class=WordSection1><p class=MsoNormal><span lang=EN-US>Hello,<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>We are trying to set up a test environment where we want to connect our Shibboleth IdP to the Novell Access Manager Identity Server (configured as a Service Provider).<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>According to de documentation on </span><a href="http://www.novell.com/communities/node/6943/integrating-novells-access-manager-shibboleths-idp-server"><span lang=EN-US>http://www.novell.com/communities/node/6943/integrating-novells-access-manager-shibboleths-idp-server</span></a><span lang=EN-US> it should be possible?<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>The problem occurs when the Novell Identity Server sends the authentication request to our IdP. It responds with “<strong><span style='font-family:"Calibri","sans-serif"'>Error decoding authentication request message</span></strong>”<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>The SAML Authentication request is as follows:<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoPlainText style='margin-left:35.4pt'><span lang=EN-US><samlp:AuthnRequest xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" Consent="urn:oasis:names:tc:SAML:2.0:consent:unavailable" Destination="<a href="https://idp.example.com/idp/profile/SAML2/Redirect/SSO">https://idp.example.com/idp/profile/SAML2/Redirect/SSO</a>" ForceAuthn="false" ID="idX32Qk7WH2TJ4moRICxU50pRwMwY" IsPassive="false" IssueInstant="2011-11-25T09:16:06Z" ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Version="2.0"><saml:Issuer><a href="https://sp.example.com:8443/nidp/saml2/metadata%3c/saml:Issuer%3e%3cds:Signature">https://sp.example.com:8443/nidp/saml2/metadata</saml:Issuer><ds:Signature</a> xmlns:ds="</span><a href="http://www.w3.org/2000/09/xmldsig"><span lang=EN-US>http://www.w3.org/2000/09/xmldsig#</span></a><span lang=EN-US>"><ds:SignedInfo><CanonicalizationMethod x mlns="</span><a href="http://www.w3.org/2000/09/xmldsig"><span lang=EN-US>http://www.w3.org/2000/09/xmldsig#</span></a><span lang=EN-US>" Algorithm="</span><a href="http://www.w3.org/2001/10/xml-exc-c14n"><span lang=EN-US>http://www.w3.org/2001/10/xml-exc-c14n#</span></a><span lang=EN-US>"/><ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmlds<o:p></o:p></span></p><p class=MsoPlainText style='margin-left:35.4pt'><span lang=EN-US>ig#rsa-sha1"/><ds:Reference URI="#idX32Qk7WH2TJ4moRICxU50pRwMwY"><ds:Transforms><ds:Transform Algorithm="<a href="http://www.w3.org/2000/09/xmldsig#enveloped-signature">http://www.w3.org/2000/09/xmldsig#enveloped-signature</a>"/><ds:Transform Algorithm="</span><a href="http://www.w3.org/2001/10/xml-exc-c14n"><span lang=EN-US>http://www.w3.org/2001/10/xml-exc-c14n#</span></a><span lang=EN-US>"/></ds:Transforms><ds:DigestMethod Algorithm="</span><a href="http://www.w3.org/2000/09/xmldsig#sha1"><span lang=EN-US>http://www.w3.org/2000/09/xmldsig#sha1</span></a><span lang=EN-US>"/><<o:p></o:p></span></p><p class=MsoPlainText style='margin-left:35.4pt'><span lang=EN-US>DigestValue xmlns="</span><a href="http://www.w3.org/2000/09/xmldsig"><span lang=EN-US>http://www.w3.org/2000/09/xmldsig#</span></a><span lang=EN-US>">ibYa0NxkDvOTTsH27aqjYIkT4cE=</DigestValue></ds:Reference></ds:SignedInfo><SignatureValue xmlns="http:/ /www.w3.org/2000/09/xmldsig#"><o:p></o:p></span></p><p class=MsoPlainText style='margin-left:35.4pt'><span lang=EN-US>fMnmxWdwldCfTAZRxVVZ5O9jYYymFvMlizOhTc3COQy6MFSPrOzYHR+LH4MpHmRCIxkXbMYR<o:p></o:p></span></p><p class=MsoPlainText style='margin-left:35.4pt'><span lang=EN-US>fMnmxWdwldCfTAZRxVVZ5O9jYYymFvMlizOhTc3COQy6MFSPrOzYHR+k8wb<o:p></o:p></span></p><p class=MsoPlainText style='margin-left:35.4pt'><span lang=EN-US>JkLw7qwTk5Alcoiatlyi/9f2IihxWdKcV1lMTeACK+crJ66HSCv9Q4bnCfpA3PkPWx3SRtT9QNrN<o:p></o:p></span></p><p class=MsoPlainText style='margin-left:35.4pt'><span lang=EN-US>M74X96nH9rnZD3eVSJpr3nxEv7JH4oEwG1GlK59AjP5gyUsrcoMQNTjLyUo3zp7iIpN4c/78HF68<o:p></o:p></span></p><p class=MsoPlainText style='margin-left:35.4pt'><span lang=EN-US>4MYMZRv4JhcbMU0O8vtNG9zKrSiCD2h3WdiTqa5B71mehehppURB0ireARaPMXRO7wzImUpQOhsw<o:p></o:p></span></p><p class=MsoPlainText style='margin-left:35.4pt'><span lang=EN-US>dcDpFl3S3+uMiVq0Y9D1kg1T89yoDM3mOJLZaw==<o:p></o:p></span></p><p class=MsoPlainText style='margin-left:35.4pt'><span lang=EN-US></SignatureValue><ds:KeyInfo><ds:X509Data><ds:X509Certificate><o:p></o:p></span></p><p class=MsoPlainText style='margin-left:35.4pt'><span lang=EN-US>MIIFFzCCA/+gAwIBAgIkAhwR/6UpNm9pDtA+9feHGMmx/XRasrfbFjieU0wTAgIEQxODMA0GCSqG<o:p></o:p></span></p><p class=MsoPlainText style='margin-left:35.4pt'><span lang=EN-US>SIb3DQEBBQUAMDYxGjAYBgNVBAsTEU9yZ2FuaXphdGlvbmFsIENBMRgwFgYDVQQKFA9pc21fYW1f<o:p></o:p></span></p><p class=MsoPlainText style='margin-left:35.4pt'><span lang=EN-US>…</span><o:p></o:p></p><p class=MsoPlainText style='margin-left:35.4pt'>iMAesTP7hObcH6K/wFcEVWFOaXhQ3tfroln3FwtNkb76HgPXiW+z+ZsNwXLWTCPxxTT1onBS9D6S<o:p></o:p></p><p class=MsoPlainText style='margin-left:35.4pt'>NpDtYrC2fZHSccSbjIiCT+0xxSCeujI+njbCt5Yg5ohDdL3pWNGR4RCcoZwZIj4l25xsAjc=<o:p></o:p></p><p class=MsoPlainText style='margin-left:35.4pt'><span lang=EN-US></ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature><samlp:NameIDPolicy AllowCreate="true" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient"/></samlp:AuthnRequest><o:p></o:p></span></p><p class=MsoPlainText style='margin-left:35.4pt'><span lang=EN-US><o:p> </o:p></span></p><p class=MsoPlainText><span lang=EN-US>And the idp-process log file contains:<o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US><o:p> </o:p></span></p><p class=MsoPlainText style='margin-left:35.4pt'><span lang=EN-US>10:16:03.729 - INFO [Shibboleth-Access:74] - - 20111125T091603Z| |idp.example.com:443|/profile/SAML2/Redirect/SSO|<o:p></o:p></span></p><p class=MsoPlainText style='margin-left:35.4pt'><span lang=EN-US>10:16:03.730 - DEBUG [edu.internet2.middleware.shibboleth.idp.profile.IdPProfileHandlerManager:86] - - shibboleth.HandlerManager: Looking up profile handler for request path: /SAML2/Redirect/SSO<o:p></o:p></span></p><p class=MsoPlainText style='margin-left:35.4pt'><span lang=EN-US>10:16:03.730 - DEBUG [edu.internet2.middleware.shibboleth.idp.profile.IdPProfileHandlerManager:97] - - shibboleth.HandlerManager: Located profile handler of the following type for the request path: edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler<o:p></o:p></span></p><p class=MsoPlainText style='margin-left:35.4pt'><span lang=EN-US>10:16:03.730 - DEBUG [edu.internet2.middleware.shibboleth.idp.util.HttpServletHelper:323] - - LoginContext key cookie was not present in request<o:p></o:p></span></p><p class=MsoPlainText style='margin-left:35.4pt'><span lang=EN-US>10:16:03.730 - DEBUG [edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler:160] - - Incoming request does not contain a login context, processing as first leg of request<o:p></o:p></span></p><p class=MsoPlainText style='margin-left:35.4pt'><span lang=EN-US>10:16:03.730 - DEBUG [edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler:312] - - Decoding message with decoder binding 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect'<o:p></o:p></span></p><p class=MsoPlainText style='margin-left:35.4pt'><span lang=EN-US>10:16:03.731 - DEBUG [org.opensaml.ws.message.decoder.BaseMessageDecoder:76] - - Beginning to decode message from inbound transport of type: org.opensaml.ws.transport.http.HttpServletRequestAdapter<o:p></o:p></span></p><p class=MsoPlainText style='margin-left:35.4pt'><span lang=EN-US>10:16:03.734 - DEBUG [org.opensaml.saml2.binding.decoding.HTTPRedirectDeflateDecoder:90] - - Decoded RelayState: MA==<o:p></o:p></span></p><p class=MsoPlainText style='margin-left:35.4pt'><span lang=EN-US>10:16:03.734 - DEBUG [org.opensaml.saml2.binding.decoding.HTTPRedirectDeflateDecoder:127] - - Base64 decoding and inflating SAML message<o:p></o:p></span></p><p class=MsoPlainText style='margin-left:35.4pt'><span lang=EN-US>10:16:03.735 - DEBUG [org.opensaml.ws.message.decoder.BaseMessageDecoder:183] - - Parsing message stream into DOM document<o:p></o:p></span></p><p class=MsoPlainText style='margin-left:35.4pt'><span lang=EN-US>10:16:03.736 - ERROR [org.opensaml.ws.message.decoder.BaseMessageDecoder:208] - - Encountered error parsing message into its DOM representation<o:p></o:p></span></p><p class=MsoPlainText style='margin-left:35.4pt'><span lang=EN-US>org.opensaml.xml.parse.XMLParserException: Unable to read XML from input stream<o:p></o:p></span></p><p class=MsoPlainText style='margin-left:35.4pt'><span lang=EN-US> at org.opensaml.xml.parse.BasicParserPool.parse(BasicParserPool.java:221) ~[xmltooling-1.3.3.jar:na]<o:p></o:p></span></p><p class=MsoPlainText style='margin-left:35.4pt'><span lang=EN-US> at org.opensaml.ws.message.decoder.BaseMessageDecoder.unmarshallMessage(BaseMessageDecoder.java:186) [openws-1.4.3.jar:na]<o:p></o:p></span></p><p class=MsoPlainText style='margin-left:35.4pt'><span lang=EN-US> at org.opensaml.saml2.binding.decoding.HTTPRedirectDeflateDecoder.doDecode(HTTPRedirectDeflateDecoder.java:102) [opensaml-2.5.2.jar:na]<o:p></o:p></span></p><p class=MsoPlainText style='margin-left:35.4pt'><span lang=EN-US> at org.opensaml.ws.message.decoder.BaseMessageDecoder.decode(BaseMessageDecoder.java:79) [openws-1.4.3.jar:na]<o:p></o:p></span></p><p class=MsoPlainText style='margin-left:35.4pt'><span lang=EN-US> at org.opensaml.saml2.binding.decoding.BaseSAML2MessageDecoder.decode(BaseSAML2MessageDecoder.java:70) [opensaml-2.5.2.jar:na]<o:p></o:p></span></p><p class=MsoPlainText style='margin-left:35.4pt'><span lang=EN-US> at edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler.decodeRequest(SSOProfileHandler.java:332) [shibboleth-identityprovider-2.3.4.jar:na]<o:p></o:p></span></p><p class=MsoPlainText style='margin-left:35.4pt'><span lang=EN-US> at edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler.performAuthentication(SSOProfileHandler.java:190) [shibboleth-identityprovider-2.3.4.jar:na]<o:p></o:p></span></p><p class=MsoPlainText style='margin-left:35.4pt'><span lang=EN-US> at edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler.processRequest(SSOProfileHandler.java:161) [shibboleth-identityprovider-2.3.4.jar:na]<o:p></o:p></span></p><p class=MsoPlainText style='margin-left:35.4pt'><span lang=EN-US> at edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler.processRequest(SSOProfileHandler.java:88) [shibboleth-identityprovider-2.3.4.jar:na]<o:p></o:p></span></p><p class=MsoPlainText style='margin-left:35.4pt'><span lang=EN-US> at edu.internet2.middleware.shibboleth.common.profile.ProfileRequestDispatcherServlet.service(ProfileRequestDispatcherServlet.java:84) [shibboleth-common-1.3.4.jar:na]<o:p></o:p></span></p><p class=MsoPlainText style='margin-left:35.4pt'><span lang=EN-US> at javax.servlet.http.HttpServlet.service(HttpServlet.java:717) [tomcat6-servlet-2.5-api-6.0.29.jar:na]<o:p></o:p></span></p><p class=MsoPlainText style='margin-left:35.4pt'><span lang=EN-US> …<o:p></o:p></span></p><p class=MsoPlainText style='margin-left:35.4pt'><span lang=EN-US> at org.apache.jk.common.ChannelSocket.invoke(ChannelSocket.java:774) [tomcat-coyote-6.0.29.jar:6.0.29]<o:p></o:p></span></p><p class=MsoPlainText style='margin-left:35.4pt'><span lang=EN-US> at org.apache.jk.common.ChannelSocket.processConnection(ChannelSocket.java:703) [tomcat-coyote-6.0.29.jar:6.0.29]<o:p></o:p></span></p><p class=MsoPlainText style='margin-left:35.4pt'><span lang=EN-US> at org.apache.jk.common.ChannelSocket$SocketConnection.runIt(ChannelSocket.java:896) [tomcat-coyote-6.0.29.jar:6.0.29]<o:p></o:p></span></p><p class=MsoPlainText style='margin-left:35.4pt'><span lang=EN-US> at org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:690) [tomcat-coyote-6.0.29.jar:6.0.29]<o:p></o:p></span></p><p class=MsoPlainText style='margin-left:35.4pt'><span lang=EN-US> at java.lang.Thread.run(Thread.java:636) [na:1.6.0_17]<o:p></o:p></span></p><p class=MsoPlainText style='margin-left:35.4pt'><span lang=EN-US>Caused by: java.util.zip.ZipException: invalid code lengths set<o:p></o:p></span></p><p class=MsoPlainText style='margin-left:35.4pt'><span lang=EN-US> at java.util.zip.InflaterInputStream.read(InflaterInputStream.java:164) ~[na:1.6.0_17]<o:p></o:p></span></p><p class=MsoPlainText style='margin-left:35.4pt'><span lang=EN-US> at java.util.zip.InflaterInputStream.read(InflaterInputStream.java:122) ~[na:1.6.0_17]<o:p></o:p></span></p><p class=MsoPlainText style='margin-left:35.4pt'><span lang=EN-US> at org.apache.xerces.impl.XMLEntityManager$RewindableInputStream.read(Unknown Source) ~[na:na]<o:p></o:p></span></p><p class=MsoPlainText style='margin-left:35.4pt'><span lang=EN-US> at org.apache.xerces.impl.XMLEntityManager.setupCurrentEntity(Unknown Source) ~[na:na]<o:p></o:p></span></p><p class=MsoPlainText style='text-indent:35.4pt'><span lang=EN-US> at org.apache.xerces.impl.XMLVersionDetector.determineDocVersion(Unknown Source) ~[na:na]<o:p></o:p></span></p><p class=MsoPlainText style='margin-left:35.4pt'><span lang=EN-US> at org.apache.xerces.parsers.XML11Configuration.parse(Unknown Source) ~[na:na]<o:p></o:p></span></p><p class=MsoPlainText style='margin-left:35.4pt'><span lang=EN-US> at org.apache.xerces.parsers.XML11Configuration.parse(Unknown Source) ~[na:na]<o:p></o:p></span></p><p class=MsoPlainText style='margin-left:35.4pt'><span lang=EN-US> at org.apache.xerces.parsers.XMLParser.parse(Unknown Source) ~[na:na]<o:p></o:p></span></p><p class=MsoPlainText style='margin-left:35.4pt'><span lang=EN-US> at org.apache.xerces.parsers.DOMParser.parse(Unknown Source) ~[na:na]<o:p></o:p></span></p><p class=MsoPlainText style='margin-left:35.4pt'><span lang=EN-US> at org.apache.xerces.jaxp.DocumentBuilderImpl.parse(Unknown Source) ~[na:na]<o:p></o:p></span></p><p class=MsoPlainText style='margin-left:35.4pt'><span lang=EN-US> at javax.xml.parsers.DocumentBuilder.parse(Unknown Source) ~[na:1.3.04]<o:p></o:p></span></p><p class=MsoPlainText style='margin-left:35.4pt'><span lang=EN-US> at org.opensaml.xml.parse.BasicParserPool$DocumentBuilderProxy.parse(BasicParserPool.java:672) ~[xmltooling-1.3.3.jar:na]<o:p></o:p></span></p><p class=MsoPlainText style='margin-left:35.4pt'><span lang=EN-US> at org.opensaml.xml.parse.BasicParserPool.parse(BasicParserPool.java:216) ~[xmltooling-1.3.3.jar:na]<o:p></o:p></span></p><p class=MsoPlainText style='margin-left:35.4pt'><span lang=EN-US> ... 38 common frames omitted<o:p></o:p></span></p><p class=MsoPlainText style='margin-left:35.4pt'><span lang=EN-US>10:16:03.739 - WARN [edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler:344] - - Error decoding authentication request message<o:p></o:p></span></p><p class=MsoPlainText style='margin-left:35.4pt'><span lang=EN-US>org.opensaml.ws.message.decoder.MessageDecodingException: Encountered error parsing message into its DOM representation<o:p></o:p></span></p><p class=MsoPlainText style='margin-left:35.4pt'><span lang=EN-US> at org.opensaml.ws.message.decoder.BaseMessageDecoder.unmarshallMessage(BaseMessageDecoder.java:209) ~[openws-1.4.3.jar:na]<o:p></o:p></span></p><p class=MsoPlainText style='margin-left:35.4pt'><span lang=EN-US> at org.opensaml.saml2.binding.decoding.HTTPRedirectDeflateDecoder.doDecode(HTTPRedirectDeflateDecoder.java:102) ~[opensaml-2.5.2.jar:na]<o:p></o:p></span></p><p class=MsoPlainText style='margin-left:35.4pt'><span lang=EN-US> at org.opensaml.ws.message.decoder.BaseMessageDecoder.decode(BaseMessageDecoder.java:79) ~[openws-1.4.3.jar:na]<o:p></o:p></span></p><p class=MsoPlainText style='margin-left:35.4pt'><span lang=EN-US> at org.opensaml.saml2.binding.decoding.BaseSAML2MessageDecoder.decode(BaseSAML2MessageDecoder.java:70) ~[opensaml-2.5.2.jar:na]<o:p></o:p></span></p><p class=MsoPlainText style='margin-left:35.4pt'><span lang=EN-US> at edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler.decodeRequest(SSOProfileHandler.java:332) [shibboleth-identityprovider-2.3.4.jar:na]<o:p></o:p></span></p><p class=MsoPlainText style='margin-left:35.4pt'><span lang=EN-US> at edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler.performAuthentication(SSOProfileHandler.java:190) [shibboleth-identityprovider-2.3.4.jar:na]<o:p></o:p></span></p><p class=MsoPlainText style='margin-left:35.4pt'><span lang=EN-US> at edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler.processRequest(SSOProfileHandler.java:161) [shibboleth-identityprovider-2.3.4.jar:na]<o:p></o:p></span></p><p class=MsoPlainText style='margin-left:35.4pt'><span lang=EN-US> at edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler.processRequest(SSOProfileHandler.java:88) [shibboleth-identityprovider-2.3.4.jar:na]<o:p></o:p></span></p><p class=MsoPlainText style='margin-left:35.4pt'><span lang=EN-US> at edu.internet2.middleware.shibboleth.common.profile.ProfileRequestDispatcherServlet.service(ProfileRequestDispatcherServlet.java:84) [shibboleth-common-1.3.4.jar:na]<o:p></o:p></span></p><p class=MsoPlainText style='margin-left:35.4pt'><span lang=EN-US> at javax.servlet.http.HttpServlet.service(HttpServlet.java:717) [tomcat6-servlet-2.5-api-6.0.29.jar:na]<o:p></o:p></span></p><p class=MsoPlainText style='margin-left:35.4pt'><span lang=EN-US> …<o:p></o:p></span></p><p class=MsoPlainText style='margin-left:35.4pt'><span lang=EN-US> at org.apache.jk.common.ChannelSocket.invoke(ChannelSocket.java:774) [tomcat-coyote-6.0.29.jar:6.0.29]<o:p></o:p></span></p><p class=MsoPlainText style='margin-left:35.4pt'><span lang=EN-US> at org.apache.jk.common.ChannelSocket.processConnection(ChannelSocket.java:703) [tomcat-coyote-6.0.29.jar:6.0.29]<o:p></o:p></span></p><p class=MsoPlainText style='margin-left:35.4pt'><span lang=EN-US> at org.apache.jk.common.ChannelSocket$SocketConnection.runIt(ChannelSocket.java:896) [tomcat-coyote-6.0.29.jar:6.0.29]<o:p></o:p></span></p><p class=MsoPlainText style='margin-left:35.4pt'><span lang=EN-US> at org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:690) [tomcat-coyote-6.0.29.jar:6.0.29]<o:p></o:p></span></p><p class=MsoPlainText style='margin-left:35.4pt'><span lang=EN-US> at java.lang.Thread.run(Thread.java:636) [na:1.6.0_17]<o:p></o:p></span></p><p class=MsoPlainText style='margin-left:35.4pt'><span lang=EN-US>Caused by: org.opensaml.xml.parse.XMLParserException: Unable to read XML from input stream<o:p></o:p></span></p><p class=MsoPlainText style='margin-left:35.4pt'><span lang=EN-US> at org.opensaml.xml.parse.BasicParserPool.parse(BasicParserPool.java:221) ~[xmltooling-1.3.3.jar:na]<o:p></o:p></span></p><p class=MsoPlainText style='margin-left:35.4pt'><span lang=EN-US> at org.opensaml.ws.message.decoder.BaseMessageDecoder.unmarshallMessage(BaseMessageDecoder.java:186) ~[openws-1.4.3.jar:na]<o:p></o:p></span></p><p class=MsoPlainText style='margin-left:35.4pt'><span lang=EN-US> ... 37 common frames omitted<o:p></o:p></span></p><p class=MsoPlainText style='margin-left:35.4pt'><span lang=EN-US>Caused by: java.util.zip.ZipException: invalid code lengths set<o:p></o:p></span></p><p class=MsoPlainText style='margin-left:35.4pt'><span lang=EN-US> at java.util.zip.InflaterInputStream.read(InflaterInputStream.java:164) ~[na:1.6.0_17]<o:p></o:p></span></p><p class=MsoPlainText style='margin-left:35.4pt'><span lang=EN-US> at java.util.zip.InflaterInputStream.read(InflaterInputStream.java:122) ~[na:1.6.0_17]<o:p></o:p></span></p><p class=MsoPlainText style='margin-left:35.4pt'><span lang=EN-US> at org.apache.xerces.impl.XMLEntityManager$RewindableInputStream.read(Unknown Source) ~[na:na]<o:p></o:p></span></p><p class=MsoPlainText style='margin-left:35.4pt'><span lang=EN-US> at org.apache.xerces.impl.XMLEntityManager.setupCurrentEntity(Unknown Source) ~[na:na]<o:p></o:p></span></p><p class=MsoPlainText style='margin-left:35.4pt'><span lang=EN-US> at org.apache.xerces.impl.XMLVersionDetector.determineDocVersion(Unknown Source) ~[na:na]<o:p></o:p></span></p><p class=MsoPlainText style='margin-left:35.4pt'><span lang=EN-US> at org.apache.xerces.parsers.XML11Configuration.parse(Unknown Source) ~[na:na]<o:p></o:p></span></p><p class=MsoPlainText style='margin-left:35.4pt'><span lang=EN-US> at org.apache.xerces.parsers.XML11Configuration.parse(Unknown Source) ~[na:na]<o:p></o:p></span></p><p class=MsoPlainText style='margin-left:35.4pt'><span lang=EN-US> at org.apache.xerces.parsers.XMLParser.parse(Unknown Source) ~[na:na]<o:p></o:p></span></p><p class=MsoPlainText style='margin-left:35.4pt'><span lang=EN-US> at org.apache.xerces.parsers.DOMParser.parse(Unknown Source) ~[na:na]<o:p></o:p></span></p><p class=MsoPlainText style='margin-left:35.4pt'><span lang=EN-US> at org.apache.xerces.jaxp.DocumentBuilderImpl.parse(Unknown Source) ~[na:na]<o:p></o:p></span></p><p class=MsoPlainText style='margin-left:35.4pt'><span lang=EN-US> at javax.xml.parsers.DocumentBuilder.parse(Unknown Source) ~[na:1.3.04]<o:p></o:p></span></p><p class=MsoPlainText style='margin-left:35.4pt'><span lang=EN-US> at org.opensaml.xml.parse.BasicParserPool$DocumentBuilderProxy.parse(BasicParserPool.java:672) ~[xmltooling-1.3.3.jar:na]<o:p></o:p></span></p><p class=MsoPlainText style='margin-left:35.4pt'><span lang=EN-US> at org.opensaml.xml.parse.BasicParserPool.parse(BasicParserPool.java:216) ~[xmltooling-1.3.3.jar:na]<o:p></o:p></span></p><p class=MsoPlainText style='margin-left:35.4pt'><span lang=EN-US> ... 38 common frames omitted<o:p></o:p></span></p><p class=MsoPlainText style='margin-left:35.4pt'><span lang=EN-US><o:p> </o:p></span></p><p class=MsoPlainText><span lang=EN-US>Maybe this does ring a bell for someone?<o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US>Does the authentication request look wrong in any way?<o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US>Any thoughts or pointers are very much welcome!<o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US><o:p> </o:p></span></p><p class=MsoPlainText><span lang=EN-US>Kind regards,<o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US><o:p> </o:p></span></p><p class=MsoPlainText><span lang=EN-US>Bart<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><o:p> </o:p></p></div></body></html>